About MS Updates, Security Bulletins, Rollups, & Security Advisories

Example:
The better "knowledge base" article that describes the vulnerability https://technet.microsoft.com/library/security/2264072
The article that actually has the downloads http://support.microsoft.com/en-us/kb/982316
Why are these not pushed out through the Microsoft Update Catalog or any of the update catalogs? I can give a list of other updates that I have to manually configure. Yes, I understand it can be imported into various utilities, WSUS, SCCM, but why not out
through a catalog as well?

Unfortunately your post is off topic as it's not specific to Microsoft Training and Certification.
This is a standard response I’ve written in advance to help the many people who post their question in this forum in error, but please don’t ignore it. The links I provide below will help you determine the right forum to ask your question in.
For technical issues with Microsoft products that you would run into as an end user, please visit the Microsoft Answers forum ( http://answers.microsoft.com ) which has sections for Windows, Hotmail,
Office, IE, and other products.
For Technical issues with Microsoft products that you might have as an IT professional (like technical installation issues, or other IT issues), please head to the TechNet Discussion forums at http://social.technet.microsoft.com/forums/en-us, and
search for your product name.
For issues with products you might have as a Developer (like how to talk to APIs, what version of software do what, or other developer issues), please head to the MSDN discussion forums at http://social.msdn.microsoft.com/forums/en-us, and
search for your product or issue.
If you’re asking a question particularly about one of the Microsoft Dynamics products, a great place to start is here: http://community.dynamics.com/
If you think your issue is related to Microsoft Training and Certification and I've flagged it as Off-topic, I apologise. Please repost your question and include as much detail as possible about your problem so that someone can assist you further.
If you really have no idea where to post your question please visit the Where is the forum for…? forum http://social.msdn.microsoft.com/forums/en-us/whatforum/
When you see answers and helpful posts, please click Vote As Helpful,
Propose As Answer, and/or Mark As Answer
Jeff Wharton
MSysDev (C.Sturt), MDbDsgnMgt (C.Sturt), MCT, MCSE: Data Platform & Business Intelligence
Blog: Mr. Wharty's Ramblings
Twitter: @Mr_Wharty
MC ID:
Microsoft Transcript

Similar Messages

Do new Security bulletins and advisories of all adobe products supersede the old ones?

Hi
Can I get the information where new Security bulletins and advisories of all adobe products supersede the old ones..
Example :
Is APSB13-15 Security updates available for Adobe Reader and Acrobat supersedes any security bulletins and advisories.
Please provide me the information where I can get this info..

Thank you..Some what helpful.
But I need to get the Security bulletins and advisories supersede information, Like Microsoft is publishing the Updates Replaced information.
It will be a great helpful if I can get the information.

Why does Adobe Elements 4.0 suddenly crash about the time Apple has a security update?

Why does Adobe Elements 4.0 suddenly start crashing about the time Apple has a security update?

An ADOBE FORUM "Community Professional" commented:
"Well, I'm not sure any of this is going to work, but go to your username>library>preferences and delete:
com.adobe.Photoshop.Elements.plist
The PSE 4 Paths and Settings folders (can't remember whether they're called Adobe Photoshop Elements 4.0 Paths or something different, but you want folders with Paths and Elements 4 in their names--you should be able to figure out which they are)
Opera preferences (if you have it)
Repair permissions and try again.
If it still quits, go to the PSE 4 folder in applications and delete the Adobe TWAIN driver from the plug-ins folder (note that you may have trouble with Epson scanners in PSE after doing this).
However, PSE 4 is pretty darned old and it's less compatible with every new OS X update, so what I've suggested may work and may not. FWIW, you probably will not be able to reinstall the program if you ever need to do so--installed versions of PSE 4 keep working in 10.6, but the installer does not."
Hope this helps

HT6041 does anyone have information re: motion 5.1 ? the latest security bulletin describes the need for it but neither " software update: or the "app store" seems to have it.

I have read and re read this security bulletin and I have checked software update and the " app store" and there is no mention of "motion" or "motion 5.1"

FWIW, here is the Apple troubleshooting note for Motion updates that aren't being offered, and the Apple best practices for Motion and related. Here are the Mac App Store troubleshooting tips.

I no longer have access to the email address that is stipulated as my rescue email address and I cannot remember the answers to my security questions. Please advise how I go about changing / updating the answers to the security questions.

I no longer have access to the email address that is stipulated as my rescue email address and I cannot remember the answers to my security questions. Please advise how I go about changing / updating the answers to the security questions.

Contact iTunes Support:
http://support.apple.com/kb/HT5699?viewlocale=en_US
or by email:
https://ssl.apple.com/emea/support/itunes/contact.html
Cheers,
GB

Does ColdFusion : Security Bulletin APSB10-11 apply to MX 7.0.2

I contacted adobe phone support and was directed to post my question to the forum because adobe doesn't provide phone support for server products.
So, Does ColdFusion : Security Bulletin APSB10-11 apply to MX 7.0.2?
In the Security Bulleting it reads like it does:
Summary
Important vulnerabilities have been identified in ColdFusion 8.0, 8.0.1, 9.0 and earlier versions for Windows, Macintosh and UNIX. The vulnerabilities could lead to cross-site scripting and information disclosure.
source: http://www.adobe.com/support/security/bulletins/apsb10-11.html
However, there are no solutions in the technote:
Issue
Note: This technote and the attachments have been updated on 05/13/2010. All ColdFusion users should review the technote again. An issue when this security fix was applied with Cumulative Hot Fix 4 for ColdFusion 8.0.1 has been identified and resolved. The issue was caused by a naming conflict.
ColdFusion 9.0, 8.0.1 and 8.0 are affected with the issue mentioned in the security bulletin APSB10-11. This technote provides fixes for the security issues along with the installation instructions.
source: http://kb2.adobe.com/cps/841/cpsid_84102.html
Additionally, does anyone know if Cold Fusion MX 7.0.2 is a supported product?
Thank you any help will be benifitial.

I contacted adobe phone support and was directed to post my question to the forum because adobe doesn't provide phone support for server products.
I have had phone support from them, and they were quite helpful. Do you mean they don't do free phone support? No, they don't.
I cannot believe they suggested you raise an issue on the forum. That's just sh!t. There's no other way of describing that.
Additionally, does anyone know if Cold Fusion MX 7.0.2 is a supported product?
http://www.adobe.com/support/products/enterprise/eol/eol_matrix.html#63
Only for "Extended support", whatever that is.
[searches]
Hmmm... http://www.adobe.com/support/programs/policies/terms_customer.html:
Extended Support. If version of software held by Customer at time of renewal has been end-of-lifed during the next renewal term, Customer may renew to Extended Support, provided that Extended Support is available for such software version. Information about Software that has been or soon will be end-of-lifed and Extended Support availability dates by product version are published at www.adobe.com/support. If Customer elects to purchase Extended Support, the Annual Support Fee shall be twenty-five (25%) percent of the license fee paid for the Software (if such fee cannot be established, the percentage would be based on the then-current list price of the license fee for the Software), however in no event shall the amount be less than the last renewal prior to renewing under Extended Support.
If extended support is renewed, the renewal fee would be the Annual Support Fee paid for the prior year increased by the applicable Consumer Price Index (CPI)*, for the 12-month period preceding the renewal date. Should Customer upgrade to the next major version of the Software (e.g., upgrade from 4.0 to 5.0), the Annual Support Fee for the upgraded version shall be the lesser of twenty percent (20%) of the then current list price of the license fee for such upgraded version, or the Annual Support Fee for the last renewal prior to renewing under Extended Support increased by the applicable Consumer Price Index (CPI)*, for the 12-month period preceding the renewal date.
So there you go. It's something you'd have to be paying for anyhow, and my reading of that is that it's too late to get it now anyhow.
I think this will also mean that you're definitely out of luck in regards to any sort of patching going on for CFMX7.
Adam

Adobe AIR 13 Runtime Security Bulletin for Windows or Mac

According to 5/13/2014 - Release - AIR 13 Runtime and SDK, the update for Adobe AIR 13 on 5/13/2014 includes fixes and security updates "Security update details can be found here: Security Bulletin (APSB14-14)", we have two questions:
1. Why the Adobe Air 13 runtime for Windows and Mac is not listed in the security bulletin APSB14-14, like APSB14-02?
2. Was the version released before Adobe AIR 13.0.0.111 for Windows Adobe AIR 4.0.0.1390 or Adobe AIR 13.0.0.83?
Thanks!
-TeamOCD

MacWorld did a comparative evaluation of the October 2008 MBA with 1.86 GHz processor and the Mid-2009 MBA with 2.13 GHz chip. Their conclusion was that that 1.86 CPU was actually FASTER than the 2.13 in most applications.
http://www.macworld.com/article/141296/2009/06/macbookairmid09.html
They speculated that the 2.13 chip was being throttled by Apple to control heat issues and that's why it tested SLOWER than the (supposedly) slower 1.86 part.
Have to wait for testing of these new MBA units to know if the same thing occurs. But, for the Rev. B and C MBAs, the 1.86 part was actually faster in real world use!

Cannot validate pgp signatures of microsoft security bulletins

So I've been getting Microsoft security bulletins for years and I thought I would actually verify the PGP signature. I have not been able to yet. I found two public keys on microsoft sites:https://technet.microsoft.com/en-us/security/dn753714was the first key I imported. My PGP software says it is the wrong key for the June 2015 security bulletin:PHPWrong signature of Microsoft SecurityNotifications (Key ID: BF05BFF43AA549E5)Notably on that link above, the page says it was "Updated: December 15, 2015" (in the future). I found that page linked fromanother page.I found another key and replaced the above key with a slightly older one. I still get an "unknown" key errorTextSigned with unknown key(Key ID: BF05BFF43AA549E5)I also foundboth keyson the MIT key server.What do you get when you verify Microsoft PGP signatures?
This topic first appeared in the Spiceworks Community

Hi,
Thanks for your advise. I record your feedback.
Juke Chou
TechNet Community Support

Microsoft Security Bulletin Advance Notification for April 2011

Wow! Microsoft's April Patch is planning 17 Bulletins to Fix 64 Bugs. As always it includes some security updates.
https://www.microsoft.com/technet/security/bulletin/ms11-apr.mspx
ThinkPad: T530 / X1 Gen 2 / Helix - Yoga: Tablet 2 Pro (Win) / Yoga 3 Pro
If you find a post helpful and it answers your question, please click the "Accept As Solution" button.
Lenovo Advocate ~ I am not employed by Lenovo or Microsoft. I am a volunteer.
Microsoft MVP - Consumer Security
SpywareHammer

Hi Shu Hu,
I am able to parse the table and find all the tr tags.
The problem I am having is the different layouts used on the web pages.
The pages for the security bulletin's for 2013 (https://technet.microsoft.com/en-us/library/security/ms13-106.aspx)
are a different format from the bulletin's for 2014 (https://technet.microsoft.com/library/security/ms14-085).
Initally I thought I could find just tables but the table I am looking to parse is not the same index from page to page. I thought I could use the table name attribute but that was not populated. I started looking at each elelement on the HTML
page until I found the text "Affected Software." Once I found the tag in the innerText field I looked for the next table to process the rows.
I was hoping that the formatting would be the same from year to year but it is not so I was looking to see if there was a solution already but it does not look that way.
I will take a closer look at the article you provided to see if that will help.

Subscribe to only coldfusion security bulletins

How can I subscribe to *ONLY* coldfusion security bulletins. Preferably CF9 only.
thanks,
jbee

Is Microsoft is still releasing security bulletins for pre-SP1 Windows Server 2008 R2? My guess is no. The "service pack support end date" is listed as 4/9/2013.
Which is exactly what that date means. No more updates for the previous SP level(s) of the product; no more
support for systems running the previous SP level(s) of the product.
But the admin thinks pre-SP1 is still eligible for security bulletins until the end of its Extended Support
The 'admin' is incorrect, and this behavior is no different than it has been since the updates for Windows Server 2003 Service Pack 1 were cut off in April 2007. Following the cutoff date, updates are explicitly coded to ignore older SP level(s) of the product.
This should be very easy to prove to your 'admin'. Show your 'admin' a WS2008R2 *RTM* machine in the WSUS console with one of those current updates released after April 2013 and observe very closely the
Not Applicable status that is reported, and have the 'admin' contemplate why that is. Or, if no WSUS, just scan WU and try to find anything released after April 2013 in the list of available updates (assuming there are actually
any available updates at all).
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

Security Bulletins:

1). Security Bulletin: Integrated Management Module II (IMM2) affected by vulnerabilities in libxml2 (CVE-2014-0191, CVE-2014-3660)
2). Security Bulletin: Vulnerability in RC4 stream cipher affects Integrated Management Module 2 (IMM2) (CVE-2015-2808)
3). Security Bulletin: Vulnerabilities in OpenSSL affect Integrated Management Module 2 (IMM2) (CVE-2014-3513, CVE-2014-3567, CVE-2014-3568)

http://www.apple.com/support/feedback/
This forum is for questions about the Discussions forums themselves.
You should at lease create a structure naming convention like Microsoft and Adobe for there bulletin names.
They do. Apple uses the industry-standard CVE:
http://cve.mitre.org/about/
which is also used and/or supported by Microsoft, IBM, Lenovo, Symantec, McAfee, Cisco, the NIST, the NSA, Red Hat, and many other companies and organizations.
You should also have more information on what the vulnerabilities do and what type of mitigation you require to put in place.
Seems to me that the level of detail Apple provides in their security bulletins, e.g.:
http://support.apple.com/kb/HT4333
is sufficient, but if you wish to make additional suggestions as to what content you feel is necessary, by all means do so.
You should also have a a security section with contact names to email too.
http://www.apple.com/support/security/
Regards.
Message was edited by: Dave Sawyer

Security Bulletin for SharePoint 2013??

Microsoft released the SharePoint 2013 version 5 Security bulletins.....in our enviorment do we need to apply all old bulletin or patching latest one will affect it.
MS14-001 (Latest One) - 1/14/2014
MS13-100
MS13-084
MS13-067
MS13-030 (4/9/2013)

The bulletins will notate if they've superseded any patches. If not, you'll want to apply each one.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Security Update 2010-001--- So secure I lost Admin Access!

I am running a Snow Leopard Server on a Mac Mini (I bought into the dual 500GB model) to host some documents and act as a small cross-platform dropbox for any kind of files that need to be shared over a biomedical research-related network. A little overkill but...
Anyway today I followed the software update prompt and installed Security Update 2010-001. After restart, I can no longer login as the administrator (or anyone else for that matter). Curiously, I can access it using +Server Admin+ and using +screen sharing+, all with the same old username and password as before. I just cannot login on the mini itself. Any thoughts on this issue? Potential was to resolve it? I have the 2nd drive configured as a Time Machine backup, so perhaps I can rewind to yesterday? Not sure how that works but I guess I can figure it out somehow.

Per Oxfjell wrote:
How'd you regain access to the Mac Mini? I have currently locked myself out in the same fashion, and the only thing I can think of is to reinstall the server OS.. Funny thing is, I'm the only one with access at the moment, and all I did was a simple reboot.. I haven't tampered with passwords or anything of the kind. Why the admin password is suddenly not working is beyond me..
In the remote server access software, somehow I had inadvertently checked the button that allowed only limited access. The way I fixed it was to go to the Access pane of the Server Admin software, then I selected the button "For the selected services" button on the left and selected "Login Window" and finally clicked the button "allow all users and groups" on the right. This is counter intuitive because you don't want to allow access to everyone, but it will still require local management of the server (eg only those already allowed to login will be allowed after you check the button)
I hope that makes sense. It solved the problem for me and saved me a lot of hassle.

Adobe Acrobat 7 Security Bulletin

http://www.adobe.com/support/security/bulletins/apsb06-20.html
Critical vulnerabilities have been identified in Adobe Reader and Acrobat 7.0 through 7.0.8 that could although Adobe is not aware of any specific code exploits at this time allow an attacker who successfully exploits these vulnerabilities to take control of the affected system.
Adobe Reader 7.0 through 7.0.8 and Adobe Acrobat Standard and Professional 7.0 through 7.0.8 on the Windows platform when using Internet Explorer. Users of other browsers are not affected.
More information available at the above link.

If there are form fields, then whoever added them probably used the forms menu, not the Acrobat form fields. Thus the PDF was converted to Designer and you are out of luck. The FORMS button found in various places in Acrobat 7 and latter takes you to Designer, not the Acrobat form tools. The latter are located in the tools menu.

HT1918 I cannot update any apps, my security code is not invalid, but it says it is. Cannot purchase apps or even do free updates? What to do??

I cannot update any apps, my security code is not invalid, but it says it is. Cannot purchase apps or even do free updates? What to do??

Take a look here:
http://support.apple.com/kb/TS1646
If that doesn't help, go here:
http://www.apple.com/support/itunes/contact/
and follow the instructions to report the issue to the iTunes Store.
Regards.
Forum Tip: Since you're new here, you've probably not discovered the Search feature available on every Communities page, but next time, it might save you time (and everyone else from having to answer the same question multiple times) if you search a couple of ways for a topic, both in the relevant forums and in the Apple Knowledge Base, before you post a question.

About MS Updates, Security Bulletins, Rollups, & Security Advisories

Similar Messages

Maybe you are looking for